Is this a penetration test?
No. It is a passive check of what anyone can see from outside. We do not log in, scan aggressively or test exploits.
Free website security check
A free website security check is a passive, outside-only review of your site. We check HTTPS, security headers, visibly outdated software, exposed files and email protection (SPF, DKIM, DMARC), without logging in or attacking anything, and send the top fixes free within 48 hours.
What we check
- HTTPS, certificate and redirects
- Security headers (CSP, HSTS, X-Frame-Options)
- Visible CMS and plugin versions
- Publicly exposed files and admin pages
- SPF, DKIM and DMARC for your domain
- Form spam protection
Why it matters
Most attacks on small business sites are automated and hit known, easy gaps. Closing them is usually quick.
Request the free audit
48 calendar hours from the form, weekends included.
What you get
- Top 5 fixes
- Each one marked with priority and effort
- A free call to go through the report
We do not fix the site in the audit, log in, review private code, or run penetration tests. One website per request. Agencies asking for audits to resell are declined.
Is it safe for my live site?
Yes. The check reads public pages and DNS records only, like a normal visitor.
Is this a separate audit?
No. It is part of the same free website audit, which always covers speed, SEO, AI search, security and conversions. Mention this topic in the notes and we put it first in your report.